corpus.blog
41,554 blogs · 4,819,422 posts Claim your blog
Back to Chainguard Blog
Blog · corpus.blog/blogs/chainguard.dev/posts

Chainguard Blog

chainguard.dev

2023

Chainguard Image now available for HAProxyoriginal ↗
9 Feb 2023
Not all that’s signed is secure: Verify the right way with TUF and Sigstoreoriginal ↗
8 Feb 2023
Chainguard Image now available for Kubectloriginal ↗
7 Feb 2023
Chainguard & BoxBoat, an IBM company, announce strategic partnership to tackle software supply chain securityoriginal ↗
1 Feb 2023
Chainguard to accelerate VEX adoption through OpenVEX specificationoriginal ↗
31 Jan 2023
Come see us at CloudNativeSecurityCon in Seattle Feb 1-2!original ↗
27 Jan 2023
Make SBOMs, not GuessBOMs: Why we need to shift left on SBOM generationoriginal ↗
26 Jan 2023
Building the first memory safe distrooriginal ↗
25 Jan 2023
Go 1.20 is coming, and it brings even more security by defaultoriginal ↗
24 Jan 2023
GitHub Container Registry private repos sometimes… weren’toriginal ↗
23 Jan 2023
Understanding the relationship between FOSS and the “software supply chain”original ↗
20 Jan 2023
Chainguard Image now available for Python 3.11original ↗
20 Jan 2023
Are SBOMs good enough for government work?original ↗
19 Jan 2023
Understanding the promise of VEXoriginal ↗
18 Jan 2023
Chainguard Image now available for Bazeloriginal ↗
17 Jan 2023
Open Policy Agent uses Chainguard Images to safeguard from OpenSSL vulnerabilitiesoriginal ↗
11 Jan 2023
Building Wolfi from the ground up and announcing arm64 support!original ↗
10 Jan 2023
Benefits of keyless software signingoriginal ↗
6 Jan 2023
Chainguard Image now available for Redisoriginal ↗
4 Jan 2023

2022

Highlights from OpenSSF’s 2022 Annual Reportoriginal ↗
30 Dec 2022
Chainguard Image now available for Ruby 3.2original ↗
29 Dec 2022
Building images for the secure supply chainoriginal ↗
27 Dec 2022
Are SBOMs any good? Preliminary measurement of the quality of open source project SBOMsoriginal ↗
21 Dec 2022
Introducing Chainguard Labs: An update on an open, living software supply chain compromises dataset and new SBOM research effortsoriginal ↗
21 Dec 2022
Our 2023 technology trends & predictions for software securityoriginal ↗
15 Dec 2022
The archiving of the Gorilla Web Toolkit: A tale of two software security risksoriginal ↗
13 Dec 2022
ICYMI: Our Chainsmas spaces recaporiginal ↗
9 Dec 2022
Software supply chain security: Broader than SolarWinds and Log4Joriginal ↗
7 Dec 2022
Principles for secure software distribution: Lessons from leaked Android platform signing keysoriginal ↗
2 Dec 2022
Securing the machine learning supply chainoriginal ↗
30 Nov 2022
Reflections on trusting VEX (or when humans can improve SBOMs)original ↗
23 Nov 2022
7 reasons you should plan to adopt Sigstore in 2023original ↗
17 Nov 2022
Software dark matter is the enemy of software transparencyoriginal ↗
9 Nov 2022
Mitigating OpenSSL vulnerability with Chainguardoriginal ↗
1 Nov 2022
Sigstore is now generally availableoriginal ↗
25 Oct 2022
Life of a Sigstore signatureoriginal ↗
25 Oct 2022
Chainguard at KubeCon North America: October 24-28!original ↗
20 Oct 2022
Is CVE-2022-42889 the next Log4Shell? Not really.original ↗
19 Oct 2022
Chainguard enthusiastically supports donating ko to CNCForiginal ↗
18 Oct 2022
Hunting malware on package repositoriesoriginal ↗
13 Oct 2022
What’s in the CNSA Suite, and who should care?original ↗
5 Oct 2022
Putting VEX to workoriginal ↗
3 Oct 2022
What’s software supply chain security got to do with the State of DevOps Report? A Lot.original ↗
28 Sept 2022
What's new in SPDX 2.3?original ↗
26 Sept 2022
Learn to build software that is secure by default with Chainguard Academyoriginal ↗
22 Sept 2022
Introducing Wolfi: The first Linux (un)distro designed for securing the software supply chainoriginal ↗
22 Sept 2022
Top 5 Takeaways on the NSA / CISA / ODNI Developer Guidelines for Securing the Software Supply Chainoriginal ↗
9 Sept 2022
Don’t overlook the boardroom benefits of a secure software supply chainoriginal ↗
7 Sept 2022
What your scanner doesn't know **Can** hurt youoriginal ↗
2 Sept 2022
A toolbox for a secure supply chainoriginal ↗
25 Aug 2022
There's no such thing as vulnerability-free software, it simply doesn't exist… yetoriginal ↗
18 Aug 2022
Implementing Secure Software Supply Chain Security Controls: Understanding NIST SSDF & SLSA Frameworksoriginal ↗
3 Aug 2022
Sigstore for CISOsoriginal ↗
28 Jul 2022
Secure your software factory with melange and apkooriginal ↗
21 Jul 2022
Let's stop insecure software from eating the worldoriginal ↗
15 Jul 2022
Minimal container images: Towards a more secure futureoriginal ↗
14 Jul 2022
Do the dependency trees of widely used packages grow?original ↗
13 Jul 2022
We applaud PyPI steps to make Python more secureoriginal ↗
12 Jul 2022
Transparently immutable tags using Sigstore's Rekororiginal ↗
7 Jul 2022
Get started with Sigstore (Free Course!)original ↗
22 Jun 2022
Keyless Git commit signing with Gitsign and GitHub Actionsoriginal ↗
20 Jun 2022
Chainguard KubeCon EU 2022 Wrap Uporiginal ↗
13 Jun 2022
The security costs of base image version loiteringoriginal ↗
9 Jun 2022
Chainguard raises $50M in Series A to make software supply chain secure by default, introduces secure container base imagesoriginal ↗
2 Jun 2022
Where Do I Sign? Step-by-step Sigstore Adoptionoriginal ↗
1 Jun 2022
Dealing with multiple SBOMsoriginal ↗
27 May 2022
The Dirty Secret of Cybersecurity Standardsoriginal ↗
19 May 2022
A Crash Course in Software Supply Chain Securityoriginal ↗
13 May 2022
A call to standardize on digital signatures for software security with Sigstoreoriginal ↗
12 May 2022
Image sizes miss the pointoriginal ↗
12 May 2022
Not All SBOMs Are Created Equaloriginal ↗
22 Apr 2022
Is Sigstore susceptible to psychic signatures? Sources say: sounds suspectoriginal ↗
22 Apr 2022
Securing Software Repositories with the OpenSSForiginal ↗
20 Apr 2022
The principle of ephemeralityoriginal ↗
12 Apr 2022
Intro to OCI Reference Typesoriginal ↗
5 Apr 2022
YOLO Levels: Insecure Your Software Supply Chain!original ↗
1 Apr 2022
Zero security debt for container images is possibleoriginal ↗
29 Mar 2022
4 Key Sigstore Takeaways: Recap of Twitter Space with Kelsey Hightoweroriginal ↗
23 Mar 2022
How Sigstore Can Help You and Your Team Follow the NIST SSDF Recommendationsoriginal ↗
16 Mar 2022
SLSA vs. Software Supply Chain Attacksoriginal ↗
15 Mar 2022
Building trust in our software supply chains with SLSAoriginal ↗
10 Mar 2022
Avoid hidden security debt with these container maintenance best practicesoriginal ↗
6 Mar 2022
I Read NIST 800-218 So You Don’t Have To: Here’s What To Watch Out Fororiginal ↗
3 Mar 2022
Knative is now a CNCF project, and why this matters for software securityoriginal ↗
2 Mar 2022
Why Chainguard joined the Open Source Security Foundationoriginal ↗
1 Mar 2022
Introducing apko: bringing distroless nirvana to Alpine Linuxoriginal ↗
28 Feb 2022
Goodbye SDLC, Hello SSDF! What is the Secure Software Development Framework?original ↗
24 Feb 2022
Automatic SBOMs with kooriginal ↗
17 Feb 2022
sigstore, the local wayoriginal ↗
16 Feb 2022
Keyless signing with Tekton on Amazon EKSoriginal ↗
10 Feb 2022
Keyless signing with Tekton on AKSoriginal ↗
8 Feb 2022
How to make package signing usefuloriginal ↗
7 Feb 2022
How to verify cosigned container images In Amazon ECSoriginal ↗
3 Feb 2022
How Citi is building the secure software factory with Sigstore and Tektonoriginal ↗
2 Feb 2022
Chainguard's Josh Dolitsky elected to OCI's Technical Oversight Boardoriginal ↗
24 Jan 2022
What an SBOM can do for youoriginal ↗
13 Jan 2022
Cosign image signing In AWS CodePipelineoriginal ↗
7 Jan 2022

2021

Kubernetes Meets SLSAoriginal ↗
17 Dec 2021
Announcing our Seed Round, and Chainguard Services!original ↗
8 Dec 2021
Zero-friction “keyless signing” with Github Actionsoriginal ↗
1 Dec 2021
Previous Next